Electronic device arrangement, method for operating an electronic device arrangement, security device, and automated teller machine

ABSTRACT

A Universal-Serial-Bus interface communicatively couples a first electronic device and a second electronic device with one another. The Universal-Serial-Bus interface includes an electrical connection structure to electrically connect the first electronic device and the second electronic device with one another and a switch to disconnect the electrical connection structure. A measurement circuit to measure one or more electrical properties is associated with the electrical connection structure and/or the first electronic device. One or more processors configured to control the switch based on the measured one or more electrical properties.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application claims priority to and the benefit of European PatentApplication EP 18 172 612.6 filed 16 May 2018, the contents of which arehereby incorporated by reference in their entirety.

BACKGROUND

In general, an automated teller machine (ATM) or any other device may beprone to physical attacks and/or electronic attacks. As an example, oneor more objects (e.g. money, gold, or other things of value) may beprotected from unauthorized physical access via a safe unit or any othersuitable mechanical protection structure of the ATM. However, to provideauthorized access to the one or more objects disposed within the safeunit, e.g. for a user of the ATM, an electromechanical device may beoperated inside the safe unit that allows transferring at least one ofthe objects out of the safe unit. This electromechanical device maydirectly or indirectly communicate with a computing device or any otherelectronic device outside the safe unit. As an example, the computingdevice may be disposed in a head unit of the ATM. For the communicationbetween a first electronic device outside the safe unit (e.g. thecomputing device) and a second electronic device inside the safe unit(e.g. the electromechanical device) a communication interface may beimplemented.

SUMMARY

Various embodiments relate generally to an electronic devicearrangement, a method for operating an electronic device arrangement, asecurity device, and an automated teller machine including a securitydevice.

Various embodiments are related to an electronic device arrangementincluding: a first electronic device; a second electronic device; and aUniversal-Serial-Bus (USB) interface communicatively coupling the firstelectronic device and the second electronic device with one another,wherein the Universal-Serial-Bus interface includes an electricalconnection structure to electrically connect the first electronic deviceand the second electronic device with one another and a switch todisconnect the electrical connection structure: a measurement circuit tomeasure one or more electrical properties associated with the electricalconnection structure and/or the first electronic device; and one or moreprocessors configured to control the switch based on the measured one ormore electrical properties.

Various embodiments are related to a security device, e.g. for use in anelectronic device arrangement, the security device may include: a firstset of terminals to connect the security device with aUniversal-Serial-Bus connector, a second set of terminals to connect thesecurity device with an electronic device, a controllable terminalconnection structure to connect the first set of terminals and thesecond set of terminals with one another and to disconnect the first setof terminals and the second set of terminals from one another to controla physical connection of the Universal-Serial-Bus connector to theelectronic device; a measurement circuit coupled to the first set ofterminals to measure one or more electrical properties associated withthe Universal-Serial-Bus connector when connected to the first set ofterminals; and one or more processors configured to control thecontrollable terminal connection structure based on the determined oneor more electrical properties.

Various embodiments are related to an automated teller machine (ATM)including a security device to monitor and control aUniversal-Serial-Bus interface.

BRIEF DESCRIPTION OF THE DRAWINGS

In the drawings, like reference characters generally refer to the sameparts throughout the different views. The drawings are not necessarilyto scale, emphasis instead generally being placed upon illustrating theprinciples of various embodiments. In the following description, variousembodiments are described with reference to the following drawings.

FIG. 1 is a schematic view showing a security device according tovarious embodiments.

FIG. 2 is a schematic view showing a part of a security device accordingto various embodiments.

FIG. 3 is a schematic view showing a security device according tovarious embodiments.

FIG. 4 is a schematic view showing an automated teller machine accordingto various embodiments.

FIG. 5 is a schematic view showing an electronic device arrangementaccording to various embodiments.

FIG. 6 is a schematic flow diagram showing a method for operating anelectronic device arrangement according to various embodiments.

FIG. 7 is a schematic view showing a Universal-Serial-Bus connectorarrangement according to various embodiments.

DETAILED DESCRIPTION

The following detailed description refers to the accompanying drawingsthat show, by way of illustration, specific details and variousembodiments. These embodiments are described in sufficient detail toenable those skilled. Other embodiments may be utilized, and structural,logical, and electrical changes may be made without departing fromspirit or scope. The various embodiments are not necessarily mutuallyexclusive, as some embodiments can be combined with one or more otherembodiments to form new embodiments. Various embodiments are describedin connection with methods and various embodiments are described inconnection with devices. However, it may be understood that embodimentsdescribed in connection with methods may similarly apply to the devices,and vice versa.

The terms “at least one” and “one or more” may be understood to includeany integer number greater than or equal to one, i.e. one, two, three,four, [ . . . ], etc. The term “a plurality” may be understood toinclude any integer number greater than or equal to two, i.e. two,three, four, five, [ . . . ], etc.

The term “coupled” is used herein to mean any suitable type ofconnection, which may include a direct connection or an indirectconnection. The term “electrically connected” that is used herein todescribe an electrical connection between terminals, pins, etc., may beunderstood as an electrically conductive connection with, for example,ohmic behavior. An electrical connection may be provided by one or moremetal wires, one or more metal pins, etc. The metal may be or mayinclude, for example, copper, aluminum, silver, gold, etc.

The term “data” as used herein with reference to “control data” or“measurement data” may be understood to include information in anysuitable analog or digital form. The one or more processors describedherein may be configured as or part of a controller or of more than onecontroller.

The terms “processor” or “controller” as, for example, used herein maybe understood as any kind of entity that allows processing data. Thedata may be processed in accordance with one or more specific functionsexecuted by the processor or controller. Further, a processor orcontroller as used herein may be understood as any kind of circuit,e.g., any kind of analog or digital circuit. The term “processing” asfor example used herein referring to data processing may be understoodas any kind of operation, e.g., an I/O operation, and/or any kind oflogic operation. An I/O operation may include, for example, storing andreading from a memory. In other words, one or more memories may beassociated with the one or more processors described herein. The term“memory” as referred to herein may be understood as a non-transitorycomputer-readable medium in which data or information can be stored forretrieval.

The term “system” a computing system, etc. as described herein may beunderstood as a set of interacting elements, wherein the elements canbe, by way of example and not of limitation, one or more mechanicalcomponents, one or more electrical components, one or more instructions(e.g., encoded in storage media), and/or one or more processors, and thelike.

Various embodiments are related to a Universal-Serial-Bus (USB)interface that allows a communication between at least two electronicdevices. USB is an industrial standard defining cables, connectors andprotocols for connection, communication, and power supply. A connectionof a host (also referred to as master) device (e.g. any suitable type ofcomputing device) and one or more client (also referred to as slave)devices (e.g. I/O devices, sensors, controllers, etc.) may bestandardize via the USB standard. The versions of the USB standardinclude USB 1.0 released in January 1996; USB 1.1 released in August1998; USB 2.0 released in April 2000, USB 3.0 released in November 2008,USB 3.1 released in July 2013, USB 3.2 released in September 2017.Further, USB Battery Charging and USB Power Delivery standards areassociated with the USB standard.

USB connectors may include male connectors (also referred to as plugs)and female connectors (also referred to as receptacles or ports). Theconnectors may be of various types, wherein a male and a femaleconnector of the same type may fit together. The types may include:Type-A; Type-A Super Speed; Type-B; Type-B Super Speed; Type-C; Mini-A;Mini-B; Micro-A; Micro-B; Micro-B Super Speed. Some female connectors(e.g. Mini-AB, Micro-AB) may be configured to fit to different types ofmale connectors (e.g. to Mini-A and Mini-B, Micro-A and Micro-B). TheSuper Speed connectors may fit to the standard connectors associatedtherewith. In accordance with the types of connectors, various types ofUSB cables may be provided.

The connectors of Type-A and Type-B have four pins and the correspondingcables have four cores. Illustratively four single wires may be used toprovide one four-core cable. The connectors of Mini/Micro-A andMini/Micro-B type have five pins and the corresponding cables have fivecores. The connectors of Type-A Super Speed and Type-B Super Speed havenine pins and the corresponding cables have nine cores. The connectorsof Mini/Micro-A Super Speed and Mini/Micro-B Super Speed type have tenpins and the corresponding cables have ten cores. The connectors ofType-C have 24 pins (arranged in a twofold rotational symmetry) and thecorresponding cables have 24 cores.

There is illustrated in FIG. 1 a security device 100 in a schematicview, according to various embodiments. The security device 100 mayinclude a first set of terminals 102 and a second set of terminals 104.The first set of terminals 102 may be configured to connect the securitydevice 100 with a USB connector 112. The second set of terminals 104 maybe configured to connect the security device 100 with an electronicdevice 114 (also referred to as second electronic device).Illustratively, the security device 100, i.e. at least the respectiveterminals 102, 104 of the security device 100, may be part of a USBinterface that allows a communication of the electronic device 114 withanother electronic device via the USB connector 112. The USB connector112 may be a USB plug that may be plugged into a USB port of a computingdevice. Alternatively, the USB connector 112 may be USB port to host anysuitable type of USB device.

The security device 100 may further include a controllable terminalconnection structure 106. The controllable terminal connection structure106 may be configured, selectively, to either connect the first set ofterminals 102 or the second set of terminals 104 with one another and todisconnect the first set of terminals 102 and the second set ofterminals 104 from one another. The controllable terminal connectionstructure 106 may be configured to control a physical connection 116(e.g. an electrically conductive connection) of the USB connector 112 tothe electronic device 114. Illustratively, the controllable terminalconnection structure 106 may be configured either to connect the firstset of terminals 102 and the second set of terminals 104 with oneanother (and therefore to allow a communication with the electronicdevice 114 via the USB connector 112) or to disconnect the first set ofterminals 102 and the second set of terminals 104 from one another (andtherefore to prevent a communication with the electronic device 114 viathe USB connector 112) in a controlled manner.

The security device 100 may include a measurement circuit 120 to measure120 m one or more electrical properties 120 e associated with the USBconnector 112. Illustratively, the measurement circuit 120 may be usedto check whether the USB connector 112 and/or an additional electronicdevice (e.g. a computing device) that is connect to the USB connector112 may be manipulated.

As an example, when the USB connector 112 is properly configured andproperly electrically connected to the first set of terminals 102, theone or more electrical properties 120 e measured via the measurementcircuit 120 may be within one or more predefined reference rangesassociated with the one or more electrical properties 120 e. However, inthe case that the USB connector 112 is manipulated, e.g. in the case ofan attack, the one or more electrical properties 120 e measured via themeasurement circuit 120 may be outside the one or more predefinedreference ranges.

As another example, the USB connector 112 may be part of a computingdevice or may be coupled with a computing device. In this case, when theUSB connector 112 is properly configured and properly electricallyconnected to the first set of terminals 102 and when the computingdevice is properly configured, the one or more electrical properties 120e measured via the measurement circuit 120 may be within one or morepredefined reference ranges accordingly. The predefined reference rangesmay include one or more thresholds (e.g. lower and/or upper limits)associated with the respective values of the one or more electricalproperties 120 e. However, in the case that the USB connector 112 and/orthe computing device are manipulated, e.g. in the case of an attack tothe USB connector 112 and/or to the computing device, the one or moreelectrical properties 120 e measured via the measurement circuit 120 maybe outside the one or more predefined reference ranges.

The security device 100 may include one or more processors 130configured to control 130 c the controllable terminal connectionstructure 106 based on the determined one or more electrical properties120 e. The one e processors 130 may at least receive measurement datafrom the measurement circuit 120. In some embodiments, the one or moreprocessors 130 may be configured to trigger and/or control themeasurement circuit 120. The measurements 120 m may be performedcontinuously or in predefined time intervals.

As an example, the one or more processors 130 may be configured todisconnect the first set of terminals 102 from the second set ofterminals 104 in the case of an attack related to the USB connector 112.An attack may be detected based one the measurements 120 m carried outvia the measurement circuit 120, e.g. an attack may be detected if theone or more electrical properties 120 e measured via the measurementcircuit 120 are outside the one or more predefined reference ranges. Asan example, a predefined electrical resistance may be associated with anon-manipulated USB connector 112. When the actual electrical resistancemeasured via the measurement circuit 120 differs from the predefinedelectrical resistance, an attack may be likely and the one or moreprocessors 130 may physically disconnect the connection 116 between theUSB connector 112 and the electronic device 114.

According to various embodiments, a control signal 130 c may be providedfrom the one or more processors 130 to the controllable terminalconnection structure 106, e.g. to a switch off the controllable terminalconnection structure 106.

The security device 100 may include a housing 100 g that surrounds thecontrollable terminal connection structure 106, the measurement circuit120, the one or more processors 130, etc. The first set of terminals 102and the second set of terminals 104 may be exposed to connect the USBconnector 112 and the electronic device 114 accordingly.

There is illustrate in FIG. 2 a part 100 p of a security device 100 in aschematic view, according to various embodiments. According to variousembodiments, the security device 100 illustrated in FIG. 1 may includethe same of similar features as described with respect to the part 100 pof the security device 100 illustrated in FIG. 2.

According to various embodiments, the controllable terminal connectionstructure 106 may include a switch 206 (e.g. an electrical switch, anelectrical relay, etc.) that may be used to disconnect an electricallyconductive connection 116 between the first set of terminals 102 and thesecond set of terminals 104. According to various embodiments, theswitch 206 may be used to disconnect the physical connection 116 betweenthe USB connector 112 and the electronic device 114 or in other words todisconnect the USB interface. As an example, the communication from andto the electronic device 114 may be prevented in the case of an attack,e.g. an attack carried out via the USB connector 112.

The switch 206 may have at least a first switching state 206 a and asecond switching state 206 b. In the first switching state 206 a, thefirst set of terminals 102 and the second set of terminals 104 areconnected with one another. As an example, a first terminal of the firstset of terminals 102, a second terminal of the first set of terminals102, a third terminal of the first set of terminals 102, and a fourthterminal of the first set of terminals 102 are connected to a firstterminal of the second set of terminals 104, a second terminal of thesecond set of terminals 104, a third terminal of the second set ofterminals 104, and a fourth terminal of the second set of terminals 104respectively. In the second switching state 206 b, the first set ofterminals 102 and the second set of terminals 104 are disconnected fromone another. As an example, at least one of the terminals of the firstset of terminals 102 is not connected to the corresponding terminal ofthe second set of terminals 104.

According to various embodiments, the one or more processors 130 may beconfigured to control the controllable terminal connection structure 106only by switching the switch 206 from the first switching state 206 ainto the second switching state 206 b. In other words, after switchingthe switch 206 from the switching state 206 a into the second switchingstate 206 b, e.g. in the case of an attack, the switch 206 may not beswitched back into the first switching state 206 a via the one or moreprocessors 130. This implements for example an additional securityaspect, since it may be avoided that the switch 206 can be manipulatedas well to maintain the connection 116 between the first set ofterminals 102 and the second set of terminals 104 or to reconnect thefirst set of terminals 102 and the second set of terminals 104 despitean attack was detected and the connection 116 should be disconnected.

According to various embodiments, the switch 206 may be reset (e.g.switched back into the first switching state 206 a) manually, e.g. viaan authorized person that has physical access to the switch 206 or to amechanism and/or circuit for resetting the switch 206. As an example,the controllable terminal connection structure 106 may further include amechanical mechanism 216 for switching the switch 206 from the secondswitching state 206 b into the first switching state 206 a. A lockablemechanical protection structure 226 may be used to restrict a physicalaccess 226 a to the mechanical mechanism 216 to authorized persons only.As another example, the controllable terminal connection structure 106may further include an additional controller (independent from the oneor more processors 130) for switching the switch 206 from the secondswitching state 206 b into the first switching state 206 a.

According to various embodiments, the switch 206 may be reset (e.g.switched back into the first switching state 206 a) manually, via anauthorized person that has physical access to the switch 206 or to theadditional controller for resetting the switch 206. The additionalcontroller may be configured to require a manual input at a userinterface to reset the switch. A lockable mechanical protectionstructure 226 may be used to restrict a physical access 226 a to theuser interface to authorized persons only.

There is illustrated in FIG. 3 a security device 100 in a schematicview, according to various embodiments. According to variousembodiments, the security device 100 illustrated in FIG. 1 may includethe same of similar features as described with reference to the securitydevice 100 illustrated in FIG. 3.

According to various embodiments, the first set of terminals 102 and thesecond set of terminals 104 may each include at least four terminals 102t, 104 t associated with at least four cores of a USB cable and/or atleast four USB pins of the USB connector 112. Alternatively, asdescribed above, the fast set of terminals 102 and the second set ofterminals 104 may each include five terminals 102 t, nine terminals 102t, ten terminals 102 t, or at least twenty-four terminals 102 tdepending on the type of USB interface.

According to various embodiments, the first set of terminals 102 mayinclude at least two additional terminals 102 s associated with at leasttwo additional cores of the USB cable and/or at least two additionalpins of the USB connector 112, see for example FIG. 7.

According to various embodiments, the at least four terminals 102 t ofthe first set of terminals 102 may be used for measuring 120 m the oneor more electrical properties 120 e via the measurement circuit 120.Alternatively, or additionally, the at least two additional terminals102 s of the first set of terminals 102 may be used for measuring 120 mthe one or more electrical properties 120 e via the measurement circuit120.

According to various embodiments, the one or more electrical properties120 e may include an electrical resistance and/or an electricalimpedance of any device, cable, connector, etc. that is/are connected tothe first set of terminals 102. After an initial setup, the referencedata associated with the one or more electrical properties 120 e may bemeasured. The reference data representing a non-manipulated state of thedevice, cable, connector, etc. that is/are connected to the first set ofterminals 102.

According to various embodiments, the security device 100 may furtherinclude at least one power supply (e.g. a battery) 310 to supply the oneor more processors 130 and/or the measurement circuit 120.Illustratively, the one or more processors 130 and/or the measurementcircuit 120 may be supplied via an internal power supply 310. Thesecurity device 100 may be configured as a stand-alone device disposedwithin a safe unit. This implements for example an additional securityaspect, since it may be avoided that the security device 100 can bedisabled by an unauthorized person, e.g. by manipulating a power supply.The power supply 310 may be disposed inside the housing 100 g of thesecurity device 100. As an example, the housing 100 g of the securitydevice 100 may be configured as a safe. Alternatively, the housing 100 gof the security device 100 may be disposed in a safe.

There is illustrated in FIG. 4 an automated teller machine (ATM) 400 ina schematic view, according to various embodiments. The ATM 400 mayinclude the security device 100 described herein to secure a USBinterface of the ATM 400. However, any other communication interface maybe protected in a similar way.

According to various embodiments, the ATM 400 may include a safe unit400 s. The interior of the safe unit 400 s may be only accessible forauthorized persons. In other words, the safe unit 400 s may include amechanical protection structure to restrict a physical access to theinterior of the safe unit 400 s and at least one door to access theinterior of the safe unit 400 s. The door may be protected via a lockingmechanism or any other suitable structure.

According to various embodiments, the security device 100 may bedisposed inside the safe unit 400 s. Illustratively, the security device100 may be configured to operate (e.g. to measure the one or moreelectronic properties 120 e associated with the first set of terminals102 and/or the USB connector 112 and the control of the controllableterminal connection structure 106) independently from any computingsystem outside the safe unit 400 s.

According to various embodiments, the ATM 400 may include a USBconnector 112 disposed outside the safe unit 400 s and connected to thefirst set of terminals 102 of the security device 100. Further, the ATMmay include an electronic device 114 disposed inside the safe unit 400 sand connected to the second set of terminals 104 of the security device100.

The ATM 400 may further include a computing system 422 disposed outsidethe safe unit 400 s. The USB connector 112 may be connected to thecomputing system 422 or may be part of the computing system 422.According to various embodiments, the computing system 422 and theelectronic device 114 may be configured to communicate with one anothervia the USB interface, wherein the security device 100 may be configuredto monitor the USB interface to determine a manipulation (e.g. in thecase of an attack) of the part of the USB interface disposed outside thesafety unit 400 s or of the computing system 422. The computing system422 may be disposed in a head unit of the ATM 400.

According to various embodiments, the ATM 400 may further include anelectromechanical device 424 disposed inside the safe unit 400 s. Theelectronic device 114 may be configured to control an operation of theelectromechanical device 424 based on control data transmitted via theUSB connector 112. As an example, the computing system 422 may beconfigured to provide control data associated with an operation of theelectromechanical device 424 and to provide the control data via the USBinterface to the electronic device 114 that controls theelectromechanical device 424 based on the control data. Alternatively,the electronic device 114 may be part of the electromechanical device424 and the computing system 422 may be configured to control theelectromechanical device 424.

There is illustrated in FIG. 5 an electronic device arrangement 500 in aschematic view, according to various embodiments. The electronic devicearrangement 500 may include a first electronic device 502 and a secondelectronic device 504. A USB interface 510 may be used tocommunicatively couple the first electronic device 502 and the secondelectronic device 504 with one another. The USB interface 510 mayinclude an electrical connection structure 516 to electricallyconductively connect the first electronic device 502 and the secondelectronic device 504 with one another. The USB interface 510 mayfurther include a switch 506 to disconnect the electrical connectionstructure 516, e.g. in a controlled manner.

According to various embodiments, the electronic device arrangement 500may include a measurement circuit 520 to measure 520 m one or moreelectrical properties 520 e associated with the electrical connectionstructure 516 and/or the first electronic device 502. Further, theelectronic device arrangement 500 may include one or more processors 530configured to control 530 c the switch 506 based on the measured one ormore electrical properties 520 e. As an example, the one or moreprocessors 530 may be configured to trigger the switch 506 to disconnectthe electrical connection structure 516 based on the measured one ormore electrical properties 520 e.

According to various embodiments, the electrical connection structure516 may be controlled via a security device 100 or a similar device asdescribed herein. As an example, the electronic device arrangement 500may be an ATM, the first electronic device 502 may be a computing devicedisposed in a head unit of the ATM and including at least one USBconnector. The second electronic device 504 may be an electromechanicaltower (e.g. including the electronic device 114 and theelectromechanical device 424) disposed in a safe unit of the ATM. TheUSB interface 510 that provides the communication between the twoelectronic devices 502, 504 may be monitored via the security device 100to determine an attack to the second electronic device 504 via the USBinterface 510 and/or the first electronic device 502, as describedherein. An attack to the second electronic device 504 may include amanipulation of a USB cable, a USB connector, etc. An attack to thesecond electronic device 504 may further include a manipulation (e.g. areplacement, etc.) of the first electronic device 502.

According to various embodiments, the one or more electrical properties520 e may include an electrical resistance and/or an electricalimpedance associated with at least a part of the electrical connectionstructure 516. Additionally, or alternatively, the one or moreelectrical properties 520 e may include an electrical resistance and/oran electrical impedance associated with at least a part of the firstelectronic device 502.

There is illustrated in FIG. 6 a schematic flow diagram of a method 600for operating an electronic device arrangement 500, according to variousembodiments. The method 600 may include: in 610, communicativelycoupling a first electronic device 502 of the electronic devicearrangement 500 to a second electronic device 504 of the electronicdevice arrangement 500 via a USB interface 510, wherein the USBinterface 510 includes an electrical connection structure 516 toelectrically connect the first electronic device 502 and the secondelectronic device 504 with one another and a switch 506 to disconnectthe electrical connection structure 516; in 620, measuring one or moreelectrical properties 520 e associated with the electrical connectionstructure 516 and/or with the first electronic device 502; and, in 630,triggering the switch 506 to disconnect the electrical connectionstructure 516 based on the measured one or more electrical properties520 e.

According to various embodiments, the switch 506 may be triggered whenthe measured one or more electrical properties 520 e exceed or fallbelow one or more pre-defined thresholds.

According to various embodiments, the method 600 may further include,e.g. after triggering the switch 506, manually resetting the switch 506via a mechanical mechanism to electrically connect the first electronicdevice 502 and the second electronic device 504 with one another. Themechanical mechanism may be configured as described herein withreference to the mechanical mechanism 216 of the security device 100.

According to various embodiments, the method 600 may further include,e.g. before manually resetting the switch 506, unlocking a mechanicalprotection structure to physically access the mechanical mechanism. Themechanical protection structure may be configured as described hereinwith reference to the lockable mechanical protection structure 226 ofthe security device 100 and/or the safe unit 400 s of the ATM 400. Inthe case that the security device 100 is disposed within a safe unit(e.g. of an ATM), the safe unit may be the lockable mechanicalprotection structure 226.

There is illustrated in FIG. 7 a USB connector arrangement 712 in aschematic view, according to various embodiments. The USB connectorarrangement 712 may include a USB port 712 f and a USB plug 712 mplugged into the USB port 712 f. According to various embodiments, theUSB plug 712 m may be the USB connector 112 of the security device 100described herein. In this case, the USB plug 712 m may be connected witha computing device 422, e.g. with a USB port of the computing device422, as described herein. Alternatively, the USB port 712 f may be theUSB connector 112 of the security device 100 described herein. In thiscase, any suitable electronic device including a USB plug 712 m may beconnected with the USB port 712 f.

According to various embodiments, the USB connector, e.g. the USB plug712 m, may include at least four pins 702 and at least two additionalpins 702 s. The additional pins 702 s may be used to measure the one ormore electrical properties via the measurement circuit, e.g. when theUSB connector is connected to the first terminal 102 of the securitydevice 100, accordingly.

According to various embodiments, the additional pins 702 s may be usedto identify and/or to authenticate any electronic device coupled to theUSB connector. A predefined electronic device to be connected to the USBconnector may include, for example, a pre-defined electrical resistance.The measurement circuit may be used to measure the actual electricalresistance of an electronic device connected to the USB connector andthe one or more processors may be configured to compare the measured theactual electrical resistance of the electronic device connected to theUSB connector with the pre-defined electrical resistance to determinewhether the predefined electronic device is connected to the USBconnector or another (e.g. manipulated) device. In the case that nopredefined electronic device is connected to USB connector, the one ormore processors may be configured to disable the USB interface.

In a similar way, the additional pins 702 s may be used to identifyand/or to authenticate the USB connector itself. A predefined USBconnector to be connected to the first set of terminals 102 of thesecurity device 100 may include, for example, a pre-defined electricalresistance. The measurement circuit may be used to measure the actualelectrical resistance of an USB connector that is connected to the firstset of terminals 102 of the security device 100 and the one or moreprocessors may be configured to compare the measured the actualelectrical resistance of the USB connector with the pre-definedelectrical resistance to determine whether the predefined USB connectoris connected to the first set of terminals 102 of the security device100 or another (e.g. manipulated) structure. In the case that nopredefined USB connector is connected to the first set of terminals 102of the security device 100, the one or more processors may be configuredto disable the USB interface.

According to various embodiments, the USB connector 712 f, 712 m mayinclude additional pins 702 s and a predefined electrical resistorelectrically connecting the additional pins 702 s with one another.

In the following, various examples are provided that refer to theembodiments described herein.

Example 1 is a security device 100 including: a first set of terminals102 to connect the security device 100 with a Universal-Serial-Bus 112connector, a second set of terminals 104 to connect the security device100 with an electronic device 114, a controllable terminal connectionstructure 106 to connect the first set of terminals 102 and the secondset of terminals 104 with one another and to disconnect the first set ofterminals 102 and the second set of terminals 104 from one another tocontrol a physical connection 116 of the Universal-Serial-Bus connector112 to the electronic device 114; a measurement circuit 120 coupled tothe first set of terminals 102 to measure 120 m one or more electricalproperties 120 e associated with the Universal-Serial-Bus connector 112when connected to the first set of terminals 102; and one or moreprocessors 130 configured to control 130 c the controllable terminalconnection structure 106 based on the determined one or more electricalproperties 120 e.

In example 2 the security device 100 of example 1 may optionally includethat the controllable terminal connection structure 106 includes aswitch 206 having a first switching state 206 a in which the first setof terminals 102 and the second set of terminals 104 are connected withone another and a second switching state 206 b in which the first set ofterminals 102 and the second set of terminals 104 are disconnected fromone another.

In example 3, the security device 100 of example 2 may optionallyinclude that the one or more processors 130 are configured to controlthe controllable terminal connection structure 106 only by switching theswitch 206 from the first switching state 206 a into the secondswitching state 206 b.

In example 4, the security device 100 of example 2 or 3 may optionallyinclude that the controllable terminal connection structure 106 furtherincludes a mechanical mechanism 216 for switching the switch 206 fromthe second switching state 206 b into the first switching state 206 a.

In example 5, the security device 100 of example 4 may optionallyinclude a lockable mechanical protection structure 226 configured torestrict a physical access 226 a to the mechanical mechanism 216.

In example 6, the security device 100 of any one of examples 1 to 5 mayoptionally include that the first set of terminals 102 and the secondset of terminals 104 each include at least four terminals 102 t, 104 tassociated with at least four cores of a Universal-Serial-Bus cableand/or at least four Universal-Serial-Bus pins of theUniversal-Serial-Bus connector.

In example 7, the security device 100 of example 6 may optionallyinclude that the first set of terminals 102 includes at least twoadditional terminals 102 s associated with at least two additional coresof the Universal-Serial-Bus cable and/or at least two additional pins ofthe Universal-Serial-Bus connector.

In example 8, the security device 100 of any one of examples 1 to 7 mayoptionally include that the one or more electrical properties 120 einclude an electrical resistance and/or an electrical impedance.

In example 9, the security device 100 of any one of examples 1 to 8 mayoptionally include a power supply 310 to supply the one or moreprocessors 130 and/or measurement circuit 120. The power supply 310 maybe or may include a battery.

Example 10 is an automated teller machine 400 including: a safe unit 400s; a security device 100 of any one of examples 1 to 9 disposed insidethe safe unit 400 s; a Universal-Serial-Bus connector 112 disposedoutside the safe unit 400 s and connected to the first set of terminals102 of the security device 100; and an electronic device 114 disposedinside the safe unit 400 s and connected to the second set of terminals104 of the security device 100.

In example 11, the automated teller machine 400 of example 10 mayoptionally include an electromechanical device 424 disposed inside thesafe unit 400 s. The electronic device 114 may be configured to controloperation of the electromechanical device 424 based on control datatransmitted via the Universal-Serial-Bus connector 112.

In example 12, the automated teller machine 400 of example 10 or 11 mayoptionally include a computing system 422 disposed outside the safeunit. The Universal-Serial-Bus connector 112 may be connected to thecomputing system 422 or may be part of the computing system 422.

Example 13 is an electronic device arrangement 500 including: a firstelectronic device 502, a second electronic device 504, aUniversal-Serial-Bus interface 510 communicatively coupling the firstelectronic device 502 and the second electronic device 504 with oneanother, wherein the Universal-Serial-Bus interface 510 includes anelectrical connection structure 516 to electrically connect the firstelectronic device 502 and the second electronic device 504 with oneanother and a switch 506 to disconnect the electrical connectionstructure 516; a measurement circuit 520 to measure one or moreelectrical properties 520 e associated with the electrical connectionstructure 516 and/or the first electronic device 502; and one or moreprocessors 530 configured to control the switch 506 based on themeasured one or more electrical properties 520 e.

In example 14, the electronic device arrangement 500 of example 13 mayoptionally include that the electrical connection structure 516 includesa first set of terminals and a second set of terminals. The firstelectronic device 502 and the second electronic device 504 may beconnected to the first set of terminals and the second set of terminalsrespectively via the electrical connection structure 516.

In example 15, the electronic device arrangement 500 of example 14 mayoptionally include that the switch 506 has a first switching state inwhich the first set of terminals and the second set of terminals areconnected with one another and a second switching state in which thefirst set of terminals and the second set of terminals are disconnectedfrom one another.

In example 16, the electronic device arrangement 500 of example 15 mayoptionally include that the one or more processors 530 are configured tocontrol the switch 506 only by triggering a switching from the firstswitching state into the second switching state when the measured one ormore electrical properties 520 e exceed or fall below one or morepre-defined thresholds.

In example 17, the electronic device arrangement 500 of example 15 or 16may optionally include a mechanical mechanism to manually switch theswitch 506 from the second switching state into the first switchingstate.

In example 18, the electronic device arrangement 500 of example 17 mayoptionally include a lockable mechanical protection structure configuredto restrict a physical access to the mechanical mechanism.

In example 19, the electronic device arrangement 500 of any one ofexamples 14 to 18 may optionally include that the first set of terminalsand the second set of terminals each include at least four terminalsassociated with at least four cores of a Universal-Serial-Bus cableand/or at least four Universal-Serial-Bus pins of a Universal-Serial-Busconnector.

In example 20, the electronic device arrangement 500 of example 19 mayoptionally include that the first set of terminals includes at least twoadditional terminals associated with at least two additional cores ofthe Universal-Serial-Bus cable and/or at least two additional pins ofthe Universal-Serial-Bus connector.

In example 21, the electronic device arrangement 500 of any one ofexamples 13 to 20 may optionally include that the one or more electricalproperties 520 e include an electrical resistance and/or an electricalimpedance associated with at least a part of the electrical connectionstructure 516; and/or that the one or more electrical properties 520 einclude an electrical resistance and/or an electrical impedanceassociated with at least a part of the first electronic device 502.

In example 22, the electronic device arrangement 500 of any one ofexamples 13 to 21 may optionally include an electromechanical device424. The second electronic device 504 may be configured to controloperation of the electromechanical device 424 based on control datatransmitted via the Universal-Serial-Bus interface 510.

Example 23 is a method 600 for operating an electronic devicearrangement 500, the method 600 including: communicatively coupling afirst electronic device 502 of the electronic device arrangement 500 toa second electronic device 504 of the electronic device arrangement 500via a Universal-Serial-Bus interface 510, wherein theUniversal-Serial-Bus interface 510 includes an electrical connectionstructure 516 to electrically connect the first electronic device 502and the second electronic device 504 with one another and a switch 506to disconnect the electrical connection structure 516; measuring one ormore electrical properties 520 e associated with the electricalconnection structure 516 and/or with the first electronic device 502;and triggering the switch 506 to disconnect the electrical connectionstructure 516 based on the measured one or more electrical properties520 e.

In example 24, the method 600 of example 23 may optionally include thatthe switch 506 is triggered when the measured one or more electricalproperties 520 e exceed or fall below one or more pre-definedthresholds.

In example 25, the method 600 of example 23 or 24 may optionallyinclude: after triggering the switch 506, manually resetting the switch506 via a mechanical mechanism to electrically connect the firstelectronic device 502 and the second electronic device 504 with oneanother.

In example 26, the method 600 of example 25 may optionally include:before manually resetting the switch 506, unlocking a mechanicalprotection structure to physically access the mechanical mechanism.

While specific embodiments have been particularly shown and described,it should be understood by those skilled in the art that various changesin form and detail may be made therein without departing from the spiritand scope as defined by claims. The scope is indicated by the claims andall changes, which come within the meaning and range of equivalency ofthe claims, are therefore intended to be embraced.

What is claimed is:
 1. A security device comprising: a first set ofterminals to connect the security device with a Universal-Serial-Busconnector, a second set of terminals to connect the security device withan electronic device, a controllable terminal connection structure toconnect the first set of terminals and the second set of terminals withone another and to disconnect the first set of terminals and the secondset of terminals from one another to control a physical connection ofthe Universal-Serial-Bus connector to the electronic device; ameasurement circuit coupled to the first set of terminals to measure oneor more electrical properties associated with the Universal-Serial-Busconnector when connected to the first set of terminals; and one or moreprocessors configured to control the controllable terminal connectionstructure based on the determined one or more electrical properties;wherein the controllable terminal connection structure comprises aswitch having a first switching state in which the first set ofterminals and the second set of terminals are connected with one anotherand a second switching state in which the first set of terminals and thesecond set of terminals are disconnected from one another; and whereinthe controllable terminal connection structure further comprises amechanical mechanism for switching the switch from the second switchingstate into the first switching state.
 2. The security device of claim 1,further comprising: a lockable mechanical protection structureconfigured to restrict a physical access to the mechanical mechanism. 3.An automated teller machine comprising: a safe unit; a security devicecomprising: a first set of terminals to connect the security device witha Universal-Serial-Bus connector, a second set of terminals to connectthe security device with an electronic device, a controllable terminalconnection structure to connect the first set of terminals and thesecond set of terminals with one another and to disconnect the first setof terminals and the second set of terminals from one another to controla physical connection of the Universal-Serial-Bus connector to theelectronic device; a measurement circuit coupled to the first set ofterminals to measure one or more electrical properties associated withthe Universal-Serial-Bus connector when connected to the first set ofterminals; and one or more processors configured to control thecontrollable terminal connection structure based on the determined oneor more electrical properties, wherein the security device is disposedinside the safe unit; the Universal-Serial-Bus connector disposedoutside the safe unit and connected to the first set of terminals of thesecurity device; and the electronic device disposed inside the safe unitand connected to the second set of terminals of the security device. 4.The automated teller machine of claim 3, further comprising: anelectromechanical device disposed inside the safe unit, wherein theelectronic device is configured to control operation of theelectromechanical device based on control data transmitted via theUniversal-Serial-Bus connector.
 5. The automated teller machine of claim3, further comprising: a computing system disposed outside the safeunit, wherein the Universal-Serial-Bus connector is connected to thecomputing system or is part of the computing system.
 6. A method foroperating an electronic device arrangement, the method comprising:communicatively coupling a first electronic device of the electronicdevice arrangement to a second electronic device of the electronicdevice arrangement via a Universal-Serial-Bus interface, wherein theUniversal-Serial-Bus interface comprises an electrical connectionstructure to electrically connect the first electronic device and thesecond electronic device with one another and a switch to disconnect theelectrical connection structure; measuring one or more electricalproperties associated with the electrical connection structure and/orwith the first electronic device; triggering the switch to disconnectthe electrical connection structure based on the measured one or moreelectrical properties; and after triggering the switch, manuallyresetting the switch via a mechanical mechanism to electrically connectthe first electronic device and the second electronic device with oneanother.
 7. The method of claim 6, further comprising: before manuallyresetting the switch, unlocking a mechanical protection structure tophysically access the mechanical mechanism.